topic Re: ASA product line in Network Security https://community.cisco.com/t5/network-security/asa-product-line/m-p/1208443#M861466 <HTML><HEAD></HEAD><BODY><P>Just wanted to update everyone on the solution.</P><P></P><P>ASA auditing has a signature "2151" that prohibits large packet sizes beyond 992 bytes.</P><P></P><P>The command to disable this signature is: ip audit signature 2151 disable</P><P></P><P>to re-enable: no ip audit signature 2151 disable</P></BODY></HTML> Wed, 01 Apr 2009 17:12:04 GMT chrisv2005 2009-04-01T17:12:04Z ASA product line https://community.cisco.com/t5/network-security/asa-product-line/m-p/1208442#M861465 <P>Just a quick question. As far as PIX and ASA technology, is there a reason why you cannot ping test the outside/public ASA with packet sizes over 1000 or 1500 bytes?</P><P></P><P>Yes, all ICMP echos and relpy commands are present and you can ping and get replys using nomral 32 byte packets. </P><P></P><P>The problem is when you ping the outside/public interface with packets larger than 1000 or 1500 byte packets. Is there some IPS or signature rule on ASA's or PIX with IOS version 7 or 8 , that prevent such large packets? </P><P></P><P>I have noticed on various sites that this is the case on all our PIX and ASA's. Just wondering if this is a common signature on Firewall technology to protect the network from outside attacks. Your help is much appreciated. Thanks </P> Mon, 11 Mar 2019 15:11:25 GMT https://community.cisco.com/t5/network-security/asa-product-line/m-p/1208442#M861465 chrisv2005 2019-03-11T15:11:25Z Re: ASA product line https://community.cisco.com/t5/network-security/asa-product-line/m-p/1208443#M861466 <HTML><HEAD></HEAD><BODY><P>Just wanted to update everyone on the solution.</P><P></P><P>ASA auditing has a signature "2151" that prohibits large packet sizes beyond 992 bytes.</P><P></P><P>The command to disable this signature is: ip audit signature 2151 disable</P><P></P><P>to re-enable: no ip audit signature 2151 disable</P></BODY></HTML> Wed, 01 Apr 2009 17:12:04 GMT https://community.cisco.com/t5/network-security/asa-product-line/m-p/1208443#M861466 chrisv2005 2009-04-01T17:12:04Z